VendorsAfianfilerunany version
Vulnerabilities

Afian FileRun any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2021-35504
Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the ffmpeg binary.
Published 2021-10-05 · Modified
7.2EPSS 0.032
CVE-2021-35505
Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the magick binary.
Published 2021-10-05 · Modified
7.2EPSS 0.028
CVE-2018-7734
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request.
Published 2018-03-06 · Modified
7.2EPSS 0.013
CVE-2018-7735
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=list_filetypes request.
Published 2018-03-06 · Modified
7.2EPSS 0.013
CVE-2019-12905
FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman&section=do&page=up URI. This issue has been fixed in FileRun 2019.06.01.
Published 2019-06-20 · Modified
6.11 PoCEPSS 0.036
CVE-2019-12457
FileRun 2019.05.21 allows images/extjs Directory Listing. This issue has been fixed in FileRun 2019.06.01.
Published 2019-05-30 · Modified
5.3EPSS 0.018
CVE-2019-12458
FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01.
Published 2019-05-30 · Modified
5.3EPSS 0.018
CVE-2019-12459
FileRun 2019.05.21 allows customizables/plugins/audio_player Directory Listing. This issue has been fixed in FileRun 2019.06.01.
Published 2019-05-30 · Modified
5.3EPSS 0.018
CVE-2023-28876
A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows attackers to delete comments on files uploaded by other users.
Published 2023-12-06 · Modified
4.3EPSS 0.005